NSA Free Stuff: Information Assurance Awareness Toolkit

[Irongeek]

Hi All, Ponyboy turned me on to the fact you can get some pretty cool stuff free from the NSA. While I was searching around I found a cool info pack you can get from them. It comes in a blue box with the NSA logo on it, and while some of the info in it may be fluff to some of us it's still pretty cool looking on your reference shelf.
Here is the description from the site:

Awareness Toolkit
To enhance awareness and encourage Information Assurance (IA) education and training within the Federal Government, the members of the National Information Assurance Education and Training Program (NIETP) developed the idea of a "tool kit," consisting of appropriate IA information. Designed with your special needs in mind, the tool kit may contain items such as CDs, videos, and brochures and pamphlets. All items are designed to assist IAD customers in fostering an awareness of IA issues. The simplicity of the tool kit makes it very useful in government, education, training and awareness programs.
The tool kits are tailored to the customer, so a specific list of contents is not available. If you are interested in obtaining a toolkit, contact the NIETP or email nietptoolkit@nsa.gov.



More info at:
http://www.nsa.gov/ia/academia/aa.cfm?MenuID=10.1.1

Mine came with two DVDs and 7 CD on multiple topics like basic web security, locking down Windows and Unix boxes. The CDs seem to contain Shockwave flash presentations. Pretty cool for free.

[phishphreek]

Isn't that nifty. I just called and placed an order for one too.

Thanks for the heads up!

[rapier57]

Hey, thanks, Geek. Looks like some interesting stuff.

[genXer]

Cool - thanks much Irongeek. Just ordered mine. They wanted to know my blood-type though. I told them I'm an auditor and don't have blood anymore, just a thick black ichor.

[kr5kernel]

I had to request one by email, the phone number came back as being disconnected or no longer in service. Hope they check their email....

Irongeek, how long did it take to get?

[Irongeek]

About a week I think.

[mathgirl32]

I ordered one over the phone the other day - when this was originally posted. She said she had received tons of orders and that they were sort of backed up and out of several of the items. However, even with them being out of the boxes and some of the items, she said it would only be about two weeks at the longest. Also, unless you have or are ordering for a company they won't be able to process your order.

[cplough]

Thanks for letting me know about the company requirement. I'm contacting them in the morning to get mine sent out.

I'm generally a bit sceptical of government organizations, from seeing all their red-tape as I was growing up (army brat) - but given that the NSA's whole goal is information protection and interception, I'm interested to see what materials they provide.

--Plow

[genXer]

I love it. I had to call back to provide some additional information, and the person there - probably all of them, answer with the extension and no id. I started laughing - I almost said "The phoenix flys at noon with two hamburgers half eaten and winking to the left." Of course what else would I expect... it's just funny to hear that even at a public information disclosure outlet.

[Trevoke]

Very neat! Sent an email. Thank you!

[kr5kernel]

I heard back from them today, They are indeed backordered, but are still taking orders.

[killerbeesateme]

You'd think with project Echelon and their whole total communications in the western hemisphere wiretap that they would just send the kits to the people who replied to this forum...

Or maybe...it's a TRAP!

[The Texan]

I sent an email 4 days ago asking about how to order this but, i havent received any response! is anyone else having this problem?

[genXer]

I sent an email 4 days ago asking about how to order this but, i havent received any response! is anyone else having this problem?


I just talked to them yesterday - and they said that e-mail should be the way to go - as it *should* have all of the information you need to provide them in order for them to document who/where they are sending the kits to and the type of kit to send out. However, you may want to follow up with a phone call in another day or so - but be prepared - they will answer the phone - just stating the number you are calling, you will have to tell them why you are calling first then they will go on from there. For some reason, they *love* the cloak and dagger stuff.

They said they would be FedEx'ing the kit(s) out - but I also believe they are probably getting overwhelmed with requests right now and I think there is like one or two people supporting that area.

[kr5kernel]

It took them about 3-4 days to get back to me, Like I said above, they were backordered due to overwhelming resposes. They require the address of your employer as well.

[Wolfofmibu]

o.o;;; what about students well, I guess I'll find out I just sent an email in.

[genXer]

o.o;;; what about students well, I guess I'll find out I just sent an email in.


You're covered - Academia. But they will require some of your blood and a hair sample.

[The Texan]

I finally got an email back from them, the lady asked me why i wanted the kit so i told her but theoretically i could lie and tell her anything i wanted. anyway i just said i was interested in computer security so i wanted the kit. It took them a week to get back to me and she didnt even give me any info on ordering it! so now i will have to wait another week i guess for her to get back to me and tell me how to order it.

[dalek]

I fired off a email the same day this thread was started, I asked if it was available for Canadians, didn't hear back until today.

At first they (Desiree Hernandez-Diaz) asked if I was a US Citizen, worked in the US Gov't or worked for a US based company.


I replied back no,no and no but would they know if we in Canada had any equivalent (maybe they knew, we sure as hell don't get this kind of stuff from our Gov't unless there are strings attached), so I figured with those responses that would be the end of that.

Well a few minutes later Desiree emails me back and asks what Fed ex address we use, also our mailing address and the company name. I figure okay what the heck, I reply we use DHL and then I gave her my companies full mailing address.

Well a few minutes later I get a reply and it's a thank you from them and as soon as they have resupplied they would send it out. :)

Well I am not usually paranoid, but this is NSA right, so what do you think will show up at my companies door in a few days, a nice little package or two big goons wearing shades :eek:

Hey we had a guy here in Halifax arrested last year at the request of the Secret Service because of posting on some newsgroups death threats, against Bush.
http://www.cbc.ca/ns/story/ns_andrewbush20040910.html so I can't be too careful right :cool:

[Deeboe]

Hiya,

Genxer gave me the heads up on this and I just ordered mine! Thanks!!

-Deeboe

[©opy®ight]

Well i just got an email back from them they need my fed-ex address ?!?!. and my company name and phone number. should i just give them my address and my phone number ?

[thehorse13]

LOL. Free stuff!!!

Does anyone else find it ironic that they are hosting their computer s3curity awareness site on an IIS box using cold fusion?

--TH13

[Irongeek]

Originally posted here (http://www.AntiOnline.com/showthread.php?threadid=271726#post871362) by ©opy®ight
Well i just got an email back from them they need my fed-ex address ?!?!. and my company name and phone number. should i just give them my address and my phone number ?

I gave them the street address of work and I got the stuff.

[phishphreek]

They didn't ask me many questions at all. I told them I work for a financial institution and gave them my address. I also told them that I was going to school for computer security. They thanked me for my order and thats about it. They didn't give me an order number or tracking number or anything. Hopefully it'll show up. If not... its no like I paid for it or anything... ;)

[genXer]

Does anyone else find it ironic that they are hosting their computer s3curity awareness site on an IIS box using cold fusion?


TH13 - I thought you worked for them?!? Heh. That is actually scary what you have mentioned, can't you use your TH13 powers and get them to fix that?

Also - they just wanted my address for the FedEx'ing and my company name as I come from the business side... basically for their records and my ichor type - to which I responded IC+.

[thehorse13]

TH13 - I thought you worked for them?!?

Not for them, but I certainly cross their paths during certain operations.

What you've done is participated in an NSA info gathering exercise in exchange for information that can be gotten anywhere on the net. Oh wait, you do get a nifty box stamped "NSA" with the kewl seal.

LOL.

/me watches the sheep wander to slaughter.

[!mitationRust]

OMG LMAO
A census taker once

edit#####3 So now they're running a smaller version of the DCS1000 software bundle pckg? Those free CDs, hope you like them!

[genXer]

Not for them, but I certainly cross their paths during certain operations.

What you've done is participated in an NSA info gathering exercise in exchange for information that can be gotten anywhere on the net. Oh wait, you do get a nifty box stamped "NSA" with the kewl seal.

LOL.

/me watches the sheep wander to slaughter.


TH13 - You forgot that we also get a decoder ring. Also, I work for a publically traded company - they already got their hooks in us - just like in "Hellraiser."

Slaughter - already been there and done that - they call it SOx.

[bagggi]

hey, what about the people who are not american or not staying in america or canada, are not working, or are just students in another country which is not their home country. we cant just call them up and place an order. like if they are asking questions like if we are americans or are working for a security firm and stuff like that. i dont even sound like an american

[Ushema]

quite useful.... its great!

[thehorse13]

hey, what about the people who are not american or not staying in america or canada, are not working, or are just students in another country which is not their home country. we cant just call them up and place an order. like if they are asking questions like if we are americans or are working for a security firm and stuff like that. i dont even sound like an american


Yeah, they call that shit outta luck pal.

[phishphreek]

What you've done is participated in an NSA info gathering exercise in exchange for information that can be gotten anywhere on the net. Oh wait, you do get a nifty box stamped "NSA" with the kewl seal.

Come on now... its the NSA... we didn't have to give them any info. They've already got it, right?

[!mitationRust]

Did I tell you the time I ran into this error (www.radium.ncsc.mil) and they probably logged my addy. :D

[family guy]

What if we're 16, a highschool student and have been interested and involved with computer security for a while? ;)

I guess we could just give them a street address and a home phone number as a company right? This would be easy through email, think it would work? I ask before trying because I don't think it would be too smart to lie to the NSA unless I knew I could get away.

So, when you ordered, is there any reason it wouldn't work?

[Micromus]

Hi all!

I've been back and forth with the NSA over e-mail now the last few weeks and their final answer is that they only send to foreign countries if the recipient is American. Thats my problem, I'm not, I'm a Norwegian living and working in Norway.

Here comes my question to you dear guys and gals; Would anyone of you be an angel and relay such a nifty box over to a fellow security-geek living outside the "walls"?

I'll gladly answer the favor with a token of my appreciaction, such as a perfumed postcard with a picture of my lovely ( but not alive any more )-: cat or similar on request.


My pm-box is always open, TIA, Stian.

[rapier57]

I'm still waiting for my box. They were backordered when I submitted mine. As for Micromus' request, I'd have to see what agreement I consent to by default in accepting this product before I could weigh in on whether that could/should be done. I suspect that it would be worth my CISSP to relay the package to you.

Ya just don't cross the NSA.
;)

[thehorse13]

You can bet your arse that there will be a penal section for exporting the information. I look forward to visiting you in prison. By then your name should be "Bridget" and I can pwn j00 for a pack of smokes. ;)

--TH13

[hexadecimal]

having them send it to your house is a great question... im gonna call them now and see what i can dig up

[rapier57]

Aw, TH13, you'd pay that much for li'l ol' me!

Shucks!

;)

[yatot]

is that kit available for other countries like mine?

[The Texan]

The NSA sure likes to ask me questions lol... first they asked why i was interested in the kit, i told them... then 4 days later i get a reply asking who i work for and my address so i gave them my company and home address. then 4 more days pass and i get another email back from them asking why im using a gmail account instead of my company email ( I work as a host at a resturant lol) so i told them i dont have company email im just a college student interested in computer security... i still dont know if they have shipped it but i hope they have grrrr!!

[dalek]

X-nay on any other countries being able to get this "Spyware Kit", I just received the polite, you are not an American Citizen, and don't work for a US Gov't agency (thank God), brush off.

Well at least the MIB didn't show up at my door :D

[Trevoke]

Erm, that could be a problem, I'm not a citizen either, and I don't work for a government agency, either.. But I haven't received any messages since my last post here. Hmm.

[kr5kernel]

I just got my package in the mail today at work! So they are in deed still shipping them, I believe I requested this a day or 2 after the original post. I can hardly wait to go home nerd out!

[hexadecimal]

Thank you for your interest in the Information Assurance Awareness Toolkit (blue box). We are a federal agency and we operate under limited funding for this program. We are unable to provide every individual with a blue box. The blue box is used by and for Federal governments, State governments, or Universities. Thank you for your interest but I cannot provide you a toolkit. My deepest apologizes.

bastards! i pay my taxes!!

[jokerace]

Cool deal!! I just sent the email can't wait to recieve mine

[Raiden]

Thank you for your interest in the Information Assurance Awareness Toolkit (blue box). We are a federal agency and we operate under limited funding for this program. We are unable to provide every individual with a blue box. The blue box is used by and for U.S. Federal governments, State governments, or Universities. Thank you for your interest but I cannot provide you a toolkit. My deepest apologizes.

-Desiree

*******************************************************
Desiree Hernandez-Diaz
National Information Assurance Education and Training Program
http://www.nsa.gov/ia/academia/acade00001.cfm

*******************************************************


someone bold enough to face thehorse13 and his packs of cigs in prison to relay me one ?

:D

[The Texan]

I got the same damn msg as Raiden! im a tax paying Texan... what gives!? grrrrrrrrrr

[Irongeek]

Well, it would be expensive to send it out to everyone. At least a a university or library more than one person might use it.

[dalek]

I got the same damn msg as Raiden! im a tax paying Texan... what gives!? grrrrrrrrrr

George Dubya Bush is from there too eh!hhhhmmm conspiracy theories anyone. :D

You guys did sign on to the union right.Must be politics.Maybe it was the gmail....

[thehorse13]

The little blue box contains information that's already all over the net. Again, all you are doing is helping out the NSA conduct a study.

Shrekkie, I've already setup a deal to trade you to an angry prison gang for the small price of 3 cigarettes. ;)

[Trevoke]

I haven't received email or box. Le sigh.

[rapier57]

Got mine today. Since I work in .edu, it was a slam dunk. I'll be reviewing the material over the next few weeks. Looks like some pretty cool stuff. It may be available all over the net, but it's nice to have it in one package. I suspect that the packages may be different based on your employer. Corporate and business customers get a different mix, I suspect, than education.

I definitely have use for the materials in the organization, I think.

[The Texan]

hey rapier, if you find anything of interest do u mind sharing what it is on here... since i didnt get one im just curious as to what it is! thanx bye.

[rapier57]

My package included Information Assurance Policy & Technology (CD); Cyber Protect Interactive Training Exercise (CD); Web Security Web-Based Training (CD); Active Defense, An Executives Guide to Information Assurance (CD); Windows 2000 System Security (CD); UNIX Security for System Administrators (CD); SAIPR - System Administrator Incident Preparation & Response for UNIX (CD); Database Security Web-based Training (CD); Information Assurance Compilation Series (2 DVD); two pamphlets for the NIATEC and ISSE programs.

Your package may have different materials. It is mostly educational, awareness training and such. From a security administrator perspective, this is a huge resource for an IT security awareness program. A little of it seems a bit dated, but if it sticks to core issues and good practices, it should still be worth looking at and using.

Much of the material is DOD, DISA from the last few years, and is unclassified. Unclassified doesn't necessarily mean it can be given to foriegn nationals. That is probably why it wasn't given to some of you all. Also, I think the role you play in the organization had a lot to do with the distribution, as did budget and resources. They wanted to make sure they put the materials in the hands of those who will make use of it.

Some of the CD-base training materials use Flash. Dangitanyway!

Then, there's TH13's thought that it is an information gathering thing. Maybe. They've had me for many years anyway, so this additional won't make beans.

I also had to sign and return a receipt form. Don't think I will be re-distributing any of this. But, as horse said, much of this is already on the net in other forms.

[genXer]

Hello all-

Just got my box and autograph from Desiree before the Thanksgiving holiday. I have not installed anything just yet because I am still marvelling at the box - heh. Actually some other auditors, including our fraud investigator saw my new toys and the first thing out of her mouth "What - they couldn't just send that crap in an envelope - I wonder how much THAT cost the taxpayers?!?" I told her she was jealous because I provided information to the government about us before she did and got some nifty DVDs in exchange.

To foster TH13's line of thought - and this actually happened - my manager was curious to know if the NSA would install anything on our systems to provide more information to the NSA than we would want?!? They wouldn't DO THAT would they? :eek: So I asked to install it on her workstations to see what happens. BTW - TH13 is correct, I think I have seen heard/seen some of this stuff before (will have to wait to confirm until my manager lets me install it - heh) but then we wouldn't get the $3,000 dollar box, a letter from Desiree and someone to put all that crap together for us.

Mine had a coloring book in it too, titled "Your Government and You - Privacy is for Those with Something to Hide - You Don't Have Something to Hide Now - DO YOU?!?"- Yes it was quite a long title - but I am staying in the lines this time when coloring!... Well mostly.

Actually - all kidding aside, I had best re-ask my manager if it is okay to check out the media - you know - just because... I still liked to get paid.

[rapier57]

So far, nothing wants to be installed. However, some of the CD's want you to have flash installed so they can run.

The DVD has some pretty cornball videos, though! What a hoot! Dang, I didn't get the coloring book. Maybe that is reserved for the CPAs. ;)

YMMV.

[Trevoke]

Well, I had remained without any word since Nov. 9th, so I sent the lady an email yesterday, and I got a reply saying that she was sorry for the long delay, and that the stuff was being sent...
So keep your fingers crossed for me :)

[Trevoke]

I got the contractor's toolkit this morning. The box is pretty and blue and has a nice NSA logo and a stylized eagle.. And it was also not big enough for all the stuff they put in it!
Granted, it's all 4-5 years old and I got two samples of one of the CDs, but it's still a cool way to organize all that knowledge.